SonicWALL 5.8.1 Manuale Utente

Pagina di 1490
Network > NAT Policies
364
SonicOS 5.8.1 Administrator Guide
  •
Enable NAT Policy: Checked
  •
Create a reflective policy: Unchecked
When finished, click on the OK button to add and activate the NAT policies. With these policies 
in place, the SonicWALL security appliance translates the servers’ private IP addresses to the 
public IP address when it initiates traffic out the WAN interface (by default, the X1 interface).
Step 4
Go to the Network > NAT Policies menu and click on the Add button. The Add NAT Policy 
window is displayed. To create the NAT policies to map the custom ports to the servers’ real 
listening ports and to map the SonicWALL’s WAN IP address to the servers’ private addresses, 
choose the following from the drop-down boxes:
  •
Original Source: Any
  •
Translated Source: Original
  •
Original Destination: WAN Primary IP
  •
Translated Destination: servone_private_ip
  •
Original Service: servone_public_port
  •
Translated Service: HTTP
  •
Inbound Interface: X1
  •
Outbound Interface: Any
  •
Comment: Enter a short description
  •
Enable NAT Policy: Checked
  •
Create a reflective policy: Unchecked
And:
  •
Original Source: Any
  •
Translated Source: Original
  •
Original Destination: WAN Primary IP
  •
Translated Destination: servtwo_private_ip
  •
Original Service: servtwo_public_port
  •
Translated Service: HTTP
  •
Source Interface: X1
  •
Destination Interface: Any
  •
Comment: Enter a short description
  •
Enable NAT Policy: Checked
  •
Create a reflective policy: Unchecked
Note
Make sure you choose Any as the destination interface, and not the interface that 
the server is on. This may seem counter-intuitive, but it is actually the correct thing 
to do (if you try to specify the interface, you get an error).
When finished, click on the OK button to add and activate the NAT policies. With these policies 
in place, the SonicWALL security appliance translates the server’s public IP address to the 
private IP address when connection requests arrive from the WAN interface (by default, the X1 
interface).
Step 5
Create the access rules that allows anyone from the public Internet to access the two Web 
servers using the custom ports and the SonicWALL security appliance’s WAN IP address.